sciflow.net
HTML metadata
Technology
- CDN
- Cloudflare
Registration
- Registrar
- united-domains GmbH
- Created
- 2009-09-12
- Expires
- 2026-09-12 115 days left
- Updated
- 2026-04-04
- Name servers
-
- cortney.ns.cloudflare.com
- keenan.ns.cloudflare.com
DNS records live
- NS
-
- cortney.ns.cloudflare.com
- keenan.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- TXT
-
google-site-verification=QE2_dAyZormel3tEAfLUM0KQECFzkxCsn3zcyFvv8D8google-site-verification=NNdMmVnH6jWBgfLvbnuYIVRtDLfku8bM1fWKC05d-eA
Email authentication strong
- SPF
-
v=spf1 include:_spfcf1.sciflow.net include:_spfcf2.sciflow.net include:_spfcf3.sciflow.net include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:6265643f437d47909f4ad5499a748059@dmarc-reports.cloudflare.net,mailto:frederik.eichler@sciflow.netpolicy: quarantine - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU9pkUyJ/mGw8hDI1Yl4bem2bSUJmJk1rZFJDUgd2NToqcskJfG2jNIqWUs3eSQb3fpJl1T9TCgLqU… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7JIjer5wAspzSx0LMmobujXsf20hYk8b0B0U+MDF7Qkr9C3WxO61uXIe5te8TCLTGHHz4hnNuYHca+rW1… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfb62prMVI2y1C8FmTlMGb0zfL9St4u6LSGenC3SsrPjvbqf51P3F6CCC1MI9XrYsC3HHyOpXVQfmU0PBChecMIm…
selectors probed - google:
Certificate (current)
WE1
Expires in 27 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.sciflow.net sciflow.net app.sciflow.net *.intercom.io;script-src 'self' *.sciflow.net sciflow.net app.sciflow.net 'unsafe-inline' *.intercom.io *.intercomcdn.com;style-src 'self' 'unsafe-inline';frame-src youtube.com www.youtube.com;connect-src 'self' *.sciflow.net sciflow.net app.sciflow.net connect.sciflow.net ws: wss: *.intercom.io;img-src 'self' *.sciflow.net https://cms.sciflow.net sciflow.net data:;form-action 'self' *.sciflow.net sciflow.net connect.sciflow.net;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests- strict-transport-security
max-age=15552000; includeSubDomains- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-origin